Files
TripLog/index.php
T
laoyang 44ffee6c92 节点表单:时间框整块可点、起点终点一键导航、可直接传多张附件
三件事都是「界面上明明该有、但用起来不通」的地方:

1) 时间输入框只能点右侧那个小日历图标才弹选择器
   原生行为如此(而且各浏览器还不一致),用户会以为输入框是只读的。
   在全局脚本里给 datetime-local / date 挂 click → showPicker(),
   等于把整块输入区都当成那个图标;选择器已在显示时再调是空操作,
   不支持的浏览器静默跳过。顺带给可点光标。
   写在 layout.php 里,所以签到时间等其它时间框一并生效。

2) 起点/终点的精确位置此前只存在页面上,没有落库
   高德选点回调里拿到的 lng/lat 现在随节点一起存库,节点详情页和
   表单页都生成高德导航链接,点一下就能直接导航过去(手机端会尝试
   唤起高德 App)。链接只给 to 不给 from,让移动端自动用当前位置当起点。
   ⚠️ 高德 URI API 的坐标顺序是「经度,纬度」,写反了不报错、只会安静地
   导到地球另一边,所以单独写了单元测试守住顺序。
   手工改地名时会清掉旧坐标,退化成关键字搜索,避免「名字改了位置没改」。

3) 节点处不能上传图片附件
   节点表单改成 multipart,加拖放区 + 多选 + 本地预览 + 逐个移除,
   编辑态可勾选删除已有附件(逐条校验归属,防止改 id 删到别人家的文件)。
   上传逻辑从 AttachmentController 抽到 src/Uploads.php,两处共用一份:
   MIME 白名单、大小上限、孤儿回滚各抄一份迟早走偏。
   请求体超过 post_max_size 时 PHP 会静默丢掉 $_POST 与 $_FILES,紧随的
   CSRF 校验必然失败、报「请求已过期」——这是最难排查的一类问题。
   现在按 CONTENT_LENGTH 提前识别并给出人话提示,且该守卫必须排在
   csrf_check() 之前(只读长度、不改状态,所以顺序上是安全的)。

已验证:本地 php -l 全量、模板渲染 255 项、amap_nav_url 单测 18 项、
真实浏览器交互 47 项(时间框三处点击都弹、多选/移除后 input.files 真被
改写、超限被前端拦下、导航链接随选点刷新、勾选删除变红、三视口无溢出)、
打包 57 文件、远端 e2e 267 项,全部通过;部署后双 PHP 渲染逐字节一致。
2026-09-23 07:53:20 +08:00

165 lines
6.9 KiB
PHP

<?php
declare(strict_types=1);
require __DIR__ . '/src/Database.php';
require __DIR__ . '/src/Auth.php';
require __DIR__ . '/src/helpers.php';
require __DIR__ . '/src/Comments.php';
require __DIR__ . '/src/Members.php';
require __DIR__ . '/src/Expenses.php';
require __DIR__ . '/src/Access.php';
require __DIR__ . '/src/Migrate.php';
require __DIR__ . '/src/Mime.php';
require __DIR__ . '/src/Settings.php';
require __DIR__ . '/src/Oss.php';
require __DIR__ . '/src/Storage.php';
require __DIR__ . '/src/Attachments.php';
require __DIR__ . '/src/Uploads.php';
require __DIR__ . '/src/Controllers/AuthController.php';
require __DIR__ . '/src/Controllers/AttachmentController.php';
require __DIR__ . '/src/Controllers/ActivityController.php';
require __DIR__ . '/src/Controllers/NodeController.php';
require __DIR__ . '/src/Controllers/UserController.php';
require __DIR__ . '/src/Controllers/NodeTypeController.php';
require __DIR__ . '/src/Controllers/TravelModeController.php';
require __DIR__ . '/src/Controllers/VehicleController.php';
require __DIR__ . '/src/Controllers/RoleTagController.php';
require __DIR__ . '/src/Controllers/MemberController.php';
require __DIR__ . '/src/Controllers/CommentController.php';
require __DIR__ . '/src/Controllers/ExpenseController.php';
require __DIR__ . '/src/Controllers/MediaController.php';
require __DIR__ . '/src/Controllers/SettingsController.php';
use App\Auth;
use App\Controllers\AuthController;
use App\Controllers\ActivityController;
use App\Controllers\AttachmentController;
use App\Controllers\NodeController;
use App\Controllers\UserController;
use App\Controllers\NodeTypeController;
use App\Controllers\TravelModeController;
use App\Controllers\VehicleController;
use App\Controllers\RoleTagController;
use App\Controllers\MemberController;
use App\Controllers\CommentController;
use App\Controllers\ExpenseController;
use App\Controllers\MediaController;
use App\Controllers\SettingsController;
session_start();
date_default_timezone_set('Asia/Shanghai');
$route = $_GET['r'] ?? 'activities/index';
// 白名单:无需登录即可访问
$publicRoutes = ['auth/login', 'auth/doLogin'];
// 未登录时,强制跳转登录页
if (!in_array($route, $publicRoutes, true) && !Auth::check()) {
redirect('auth/login');
}
$map = [
// 认证
'auth/login' => [AuthController::class, 'login'],
'auth/doLogin' => [AuthController::class, 'doLogin'],
'auth/logout' => [AuthController::class, 'logout'],
// 活动
'activities/index' => [ActivityController::class, 'index'],
'activities/create' => [ActivityController::class, 'create'],
'activities/store' => [ActivityController::class, 'store'],
'activities/edit' => [ActivityController::class, 'edit'],
'activities/update' => [ActivityController::class, 'update'],
'activities/destroy' => [ActivityController::class, 'destroy'],
'activities/show' => [ActivityController::class, 'show'],
// 节点附件
'attachments/node' => [AttachmentController::class, 'node'],
'attachments/upload' => [AttachmentController::class, 'upload'],
'attachments/destroy' => [AttachmentController::class, 'destroy'],
'activities/uploadCover' => [ActivityController::class, 'uploadCover'],
// 媒体代理(照片/封面都经这里输出,不暴露 OSS 地址)
'media/show' => [MediaController::class, 'show'],
'media/cover' => [MediaController::class, 'cover'],
// 存储设置(仅管理员)
'settings/index' => [SettingsController::class, 'index'],
'settings/save' => [SettingsController::class, 'save'],
'settings/test' => [SettingsController::class, 'test'],
'settings/roles' => [SettingsController::class, 'roles'],
// 节点
'nodes/create' => [NodeController::class, 'create'],
'nodes/store' => [NodeController::class, 'store'],
'nodes/show' => [NodeController::class, 'show'],
'nodes/edit' => [NodeController::class, 'edit'],
'nodes/update' => [NodeController::class, 'update'],
'nodes/destroy' => [NodeController::class, 'destroy'],
'nodes/status' => [NodeController::class, 'status'],
'nodes/fromPlan' => [NodeController::class, 'fromPlan'],
// 节点参与人
'members/store' => [MemberController::class, 'store'],
'members/destroy' => [MemberController::class, 'destroy'],
'members/addAll' => [MemberController::class, 'addAll'],
// 评论(活动级 + 节点级)
'comments/store' => [CommentController::class, 'store'],
'comments/destroy' => [CommentController::class, 'destroy'],
// 花销与分摊
'expenses/store' => [ExpenseController::class, 'store'],
'expenses/destroy' => [ExpenseController::class, 'destroy'],
// 角色标签
'role_tags/index' => [RoleTagController::class, 'index'],
'role_tags/create' => [RoleTagController::class, 'create'],
'role_tags/store' => [RoleTagController::class, 'store'],
'role_tags/edit' => [RoleTagController::class, 'edit'],
'role_tags/update' => [RoleTagController::class, 'update'],
'role_tags/destroy' => [RoleTagController::class, 'destroy'],
// 用户
'users/index' => [UserController::class, 'index'],
'users/create' => [UserController::class, 'create'],
'users/store' => [UserController::class, 'store'],
'users/edit' => [UserController::class, 'edit'],
'users/update' => [UserController::class, 'update'],
'users/destroy' => [UserController::class, 'destroy'],
'users/uploadAvatar' => [UserController::class, 'uploadAvatar'],
// 节点类型
'node_types/index' => [NodeTypeController::class, 'index'],
'node_types/create' => [NodeTypeController::class, 'create'],
'node_types/store' => [NodeTypeController::class, 'store'],
'node_types/edit' => [NodeTypeController::class, 'edit'],
'node_types/update' => [NodeTypeController::class, 'update'],
'node_types/destroy' => [NodeTypeController::class, 'destroy'],
// 出行方式
'travel_modes/index' => [TravelModeController::class, 'index'],
'travel_modes/create' => [TravelModeController::class, 'create'],
'travel_modes/store' => [TravelModeController::class, 'store'],
'travel_modes/edit' => [TravelModeController::class, 'edit'],
'travel_modes/update' => [TravelModeController::class, 'update'],
'travel_modes/destroy' => [TravelModeController::class, 'destroy'],
// 车辆
'vehicles/index' => [VehicleController::class, 'index'],
'vehicles/create' => [VehicleController::class, 'create'],
'vehicles/store' => [VehicleController::class, 'store'],
'vehicles/edit' => [VehicleController::class, 'edit'],
'vehicles/update' => [VehicleController::class, 'update'],
'vehicles/destroy' => [VehicleController::class, 'destroy'],
];
if (!isset($map[$route])) {
http_response_code(404);
exit('404 页面不存在: ' . htmlspecialchars($route));
}
[$class, $method] = $map[$route];
(new $class())->$method();